Yes, create a new folder for the reports to be permissioned for the user.
There is an extensive array of options a user can do.
Yes, setting up security is a challenge with SSRS.
Kalman Toth - Database, Data Warehouse & Business Intelligence Architect
SQL Server 2005 Training, SSAS, SSIS, SSRS: http://www.sqlusa.com/